$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4faff6b-7147-4379-8860-35d017a1379c.roa File: a4faff6b-7147-4379-8860-35d017a1379c.roa (raw, json) Hash identifier: RSa+Q3YTa3IvNqy9dGFksyuxVBV4YToFd0A6H6IwR38= Subject key identifier: 57:B8:32:EA:A6:BF:90:62:7D:BD:B9:BB:B4:BE:D2:70:CC:55:BE:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52945714A77D7A230565DF401AFAEB7EFAECDAFC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4faff6b-7147-4379-8860-35d017a1379c.roa Signing time: Mon 17 Aug 2026 00:00:05 +0000 ROA not before: Mon 17 Aug 2026 00:00:05 +0000 ROA not after: Sun 15 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.175.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:94:57:14:a7:7d:7a:23:05:65:df:40:1a:fa:eb:7e:fa:ec:da:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 17 00:00:05 2026 GMT Not After : Nov 15 23:59:59 2026 GMT Subject: serialNumber=d797810ba9786cb62320fd48c1fda9dc2300d5243fb75df61e359e2dd56394f6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:de:97:d3:29:af:6e:44:a8:b3:39:c4:6a: 82:83:06:98:f0:ac:aa:d2:6f:ed:8c:8d:66:5e:bf: 0b:88:5c:39:4f:3b:ec:ad:47:b8:86:62:c7:ff:37: af:7e:9c:46:a5:f4:5e:a8:e6:40:7a:3c:64:ec:6c: 72:0a:20:14:01:eb:8e:0c:22:e7:de:61:95:74:be: 5f:e3:38:3e:6f:57:c8:f8:9d:10:32:4e:5f:2a:b6: e8:e4:bf:61:bc:a3:62:b3:38:0f:dd:41:37:16:6d: 17:c5:5f:77:82:df:3e:00:1a:13:1f:bb:c7:60:78: fe:61:02:54:b8:6c:7f:89:1d:1a:e9:0e:d1:a1:fa: 18:c0:c0:0b:7e:a0:87:38:77:2e:55:73:ed:31:a7: 60:b6:3c:14:7d:33:99:29:92:7b:1e:a9:03:98:8b: 7b:17:87:7a:f7:83:29:88:28:ef:db:eb:3e:37:a0: 48:0f:06:79:e4:2c:22:a3:40:b3:91:b7:b1:97:c5: 53:13:6e:23:0f:40:f8:9e:5f:0f:08:cc:53:75:ca: a0:1a:c0:09:8d:10:fd:ca:a5:a3:10:0e:af:82:06: 98:01:25:79:84:fb:59:1d:9a:18:ea:d0:39:10:aa: 01:3f:52:5a:20:07:05:6a:ea:e2:3b:25:7f:e1:0b: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B8:32:EA:A6:BF:90:62:7D:BD:B9:BB:B4:BE:D2:70:CC:55:BE:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4faff6b-7147-4379-8860-35d017a1379c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.175.128.0/17 Signature Algorithm: sha256WithRSAEncryption 28:01:95:10:db:9a:29:d1:a7:ba:c8:b1:df:07:61:31:55:3e: 9c:97:4f:80:cd:86:70:7d:8e:a9:a8:96:98:ba:23:1c:33:d5: cf:84:38:1c:1f:2c:f9:89:ac:58:8c:89:65:a2:d9:db:96:fb: 56:93:61:c4:e7:92:16:a8:e8:c1:40:52:ad:7a:0f:25:41:87: 2c:97:ca:58:ee:87:3d:f8:05:62:3d:64:ab:43:fa:15:76:4e: 8c:29:ff:b8:dc:d9:2c:e7:d3:95:c1:09:e5:4b:0b:82:f5:df: 6e:fb:89:13:95:6f:ed:55:9f:66:44:f6:f2:74:ba:88:62:db: 61:af:2e:dc:b5:05:f1:2f:8a:a1:6e:e8:eb:3b:98:81:56:74: 7c:d1:cb:10:ac:2f:c2:89:70:d1:01:98:c1:4a:d0:5a:cb:0b: b9:7e:cb:03:9f:2c:e9:15:7c:ca:9e:0a:40:98:9a:e3:44:5f: 67:db:d1:91:1b:6b:16:2a:5a:8c:92:b8:9d:34:78:8d:ee:83: 7d:a2:5b:81:bb:58:ec:37:e3:03:6c:8d:9d:58:1e:35:c0:63: 96:6f:98:4b:fb:9f:65:46:67:dd:e9:8c:0f:7c:a2:65:a6:ca: 5c:29:d4:f4:73:37:3b:6d:29:f9:33:eb:8d:81:5f:32:69:1e: 0c:83:5c:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUpRXFKd9eiMFZd9AGvrrfvrs2vwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE3MDAwMDA1WhcNMjYxMTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzk3ODEwYmE5Nzg2Y2I2MjMyMGZkNDhjMWZkYTlkYzIz MDBkNTI0M2ZiNzVkZjYxZTM1OWUyZGQ1NjM5NGY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPwd6X0ymvbkSosznEaoKDBpjwrKrSb+2MjWZevwuIXDlP O+ytR7iGYsf/N69+nEal9F6o5kB6PGTsbHIKIBQB644MIufeYZV0vl/jOD5vV8j4 nRAyTl8qtujkv2G8o2KzOA/dQTcWbRfFX3eC3z4AGhMfu8dgeP5hAlS4bH+JHRrp DtGh+hjAwAt+oIc4dy5Vc+0xp2C2PBR9M5kpknseqQOYi3sXh3r3gymIKO/b6z43 oEgPBnnkLCKjQLORt7GXxVMTbiMPQPieXw8IzFN1yqAawAmNEP3KpaMQDq+CBpgB JXmE+1kdmhjq0DkQqgE/UlogBwVq6uI7JX/hCyVNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV7gy6qa/kGJ9vbm7tL7ScMxVvvwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0ZmFmZjZiLTcxNDctNDM3OS04ODYwLTM1ZDAxN2ExMzc5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcPr4AwDQYJKoZIhvcNAQELBQADggEBACgBlRDbminRp7rIsd8HYTFVPpyX T4DNhnB9jqmolpi6Ixwz1c+EOBwfLPmJrFiMiWWi2duW+1aTYcTnkhao6MFAUq16 DyVBhyyXyljuhz34BWI9ZKtD+hV2Towp/7jc2Szn05XBCeVLC4L13277iROVb+1V n2ZE9vJ0uohi22GvLty1BfEviqFu6Os7mIFWdHzRyxCsL8KJcNEBmMFK0FrLC7l+ ywOfLOkVfMqeCkCYmuNEX2fb0ZEbaxYqWoySuJ00eI3ug32iW4G7WOw34wNsjZ1Y HjXAY5ZvmEv7n2VGZ93pjA98omWmylwp1PRzNzttKfkz642BXzJpHgyDXHs= -----END CERTIFICATE-----Generated at Sun Sep 20 17:15:55 2026 by rpki-client